Universitätsmedizin der Johannes-Gutenberg-Universität Mainz – €105,000 Fine (Germany, 2019)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A German hospital was fined for having poor data management, which led to billing mistakes and privacy issues. The hospital's systems were not secure enough, violating GDPR rules. This case highlights the importance of strong data protection practices for all organizations handling personal information.
What happened
The hospital had technical and organizational problems that caused errors in patient data handling and billing.
Who was affected
Patients at the hospital whose personal data was mishandled during admission and billing processes.
What the authority found
The data protection authority found the hospital's data management practices violated GDPR due to inadequate security measures.
Why this matters
This fine emphasizes the need for robust data protection systems in healthcare and other sectors. Organizations must ensure their data handling processes meet GDPR standards to avoid penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 6 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The LfDI announced that a hospital had mix-ups during patient admission, which lead to incorrect invoicing practices. An investigation revealed structural technical and organisational deficits in the management of patients’ personal data and severe violations of the GDPR. The DPA recognised the efforts that the hospital is planning to put to improve its data protection management.
Related Enforcement Actions (0)
No other enforcement actions found for Universitätsmedizin der Johannes-Gutenberg-Universität Mainz in DE
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
30 September 2019
Authority
DPA LFDI
Fine Amount
€105,000
About this data
Cite as: Cookie Fines. Universitätsmedizin der Johannes-Gutenberg-Universität Mainz - Germany (2019). Retrieved from cookiefines.eu
Last updated: